[ptr727]

Summary

Declares host-secrets in Blog's registry types, step 1 of ptr727/Blog#553. Blog's deploy/make-release.sh reads a host env file under ~/.secrets/, which GOVERNANCE.md "Operational Repositories" routes through the carried readers, and carry.py apply carries lib/sh to lib/fleet/sh only for a repository whose declared types select it.

• registry/repos.json: Blog's types gains host-secrets.
• reports/conformance-matrix.md: the host-secrets overlay row named HomeAutomation-Config as the first adopter, while its registry entry declares only source-only. It now names Blog as the first to declare the type, with the carry tracked in Read the Release Env File Through the Hub's Carried Readers Blog#553.

Expected Drift Until Blog #553 Lands

Between this merge reaching main and Blog's carry, an audit of Blog reports lib/fleet/sh missing and hostsecrets.library.reader unmet. Both clear in Blog's own pull request for #553, steps 2 and 3, which reads this change from hub main.

Takeover

The hub session took this pull request over on 2026-10-28, at the maintainer's direction, after the Blog session stepped away.

It merged develop in with a merge commit, since the branch was already pushed and is not its own. The merge brought in #3569, which made the validator refuse a python profile. Blog's entry declares no such profile, and the merge applied without conflict. It also split the matrix row's added sentence into two, each 25 words or fewer.

Verification

• spec/validate.py: 22 cataloged repos classify cleanly.
• scripts/prose_lint.py, whole tree: 0 violations, and the changed row trips no sentence-length finding.
• Local strict review, frontier tier, three passes. The first raised the stale matrix row, the second a wording that read as if the carry were done, and the third found nothing. Recorded.

🤖 Generated with Claude Code

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

• Source mode: Auto
• Repository: ptr727/ProjectTemplate
• Branch: registry/blog-host-secrets
• File: .coderabbit.yaml
• Commit: 081dde7
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: bfa780c4-fb89-4750-8a2b-248908527037

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

🟡 Changes recommended

The registry declaration is not yet aligned with Blog’s audit report, and the conformance matrix contains adopter and tracking-reference inaccuracies.

2 open issues

• Align Blog audit report with host-secrets declaration · New
• Mark HomeAutomation-Config as a pending adopter · New

What changed in this PR

This pull request declares Blog as the first repository adopting the host-secrets overlay and updates the conformance matrix to document the staged adoption.

Changes:

• Adds host-secrets to Blog’s registry types.
• Updates the conformance matrix with Blog’s adoption and follow-up carry tracking.
• Documents the overlay’s current adopter status.

File	Summary
reports/​conformance-matrix.md	Updates the host-secrets adoption row. The HomeAutomation-Config wording should remain pending, and the reference should point to the change that actually carries the readers.
registry/​repos.json	Declares Blog’s host-secrets type. The corresponding Blog audit report must also be updated to record the resulting findings and tracking issue, or the carry must land first.

_{Review effort: Lite}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (develop@8d390ac). Learn more about missing BASE report.

Additional details and impacted files

@@            Coverage Diff             @@
##             develop    #3534   +/-   ##
==========================================
  Coverage           ?   81.60%           
==========================================
  Files              ?       26           
  Lines              ?     9070           
  Branches           ?        0           
==========================================
  Hits               ?     7402           
  Misses             ?     1668           
  Partials           ?        0           

Flag	Coverage Δ
python-3.13	81.60% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

🟢 Approval recommended

The changes are limited to registry and documentation updates; the only finding is a non-blocking link-formatting nit.

No open issues 🎉

2 resolved since last review

• Align Blog audit report with host-secrets declaration
• Mark HomeAutomation-Config as a pending adopter

_{Review effort: Lite}

[ptr727]

Ownership: at the maintainer's direction on 2026-10-28, the ProjectTemplate hub session takes this pull request over from the Blog session. A worker merges develop into registry/blog-host-secrets with a merge commit, never a rebase. It resolves any registry/repos.json conflict with #3569, which dropped profiles.python from two other entries, regenerates reports/conformance-matrix.md if needed, and drives this into develop. Files held: registry/repos.json (Blog's entry and the merge resolution only), reports/conformance-matrix.md.

[ptr727]

A recorded local strict-review pass covers head 081dde7fd733653950f24074d2afe91cbcd219ca, the content this pull request carries at that commit against develop, and it recorded 0 findings.